Re: Looking at the wrong holes
...you just have to ensure that the JS interpreter that the browser runs when it downloads js ensures that no js program can ever do anything naughty.
There was this chap called Alan Turing who made an observation about this option.